eslint-plugin-vercel-ai-security weekly downloads statistics

ESLint plugin for Vercel AI SDK security — detects prompt injection, system-prompt leaks, hardcoded API keys, and unvalidated model output in generateText and streamText.

View on npm Fresh · Oct 18, 2026

eslint-plugin-vercel-ai-security has 1,501 recorded weekly downloads on npm, an increase of 162% over the past 30 days, ranking #1377 of 2,322 tracked listings.

Weekly downloads: 1,501; Official API · Oct 18, 2026
7-day growth: -54.1%; -1.8K weekly downloads
30-day growth: +162%; +929 weekly downloads
90-day growth: +21.1%; +262 weekly downloads
Rank: #1377; Among tracked npm listings

About eslint-plugin-vercel-ai-security

<a href="https://eslint.interlace.tools/docs/security/plugin-vercel-ai-security?utm_source=github&utm_medium=referral&utm_campaign=eslint-plugin-vercel-ai-security" target="blank"><picture><source media="(prefers-color-scheme: dark)" srcset="https://eslint.interlace.tools/logos/interlace-dark.svg"><img src="https://eslint.interlace.tools/logos/interlace-light.svg" alt="Interlace" height="90" /></picture></a>    <a href="https://vercel.com/docs/ai-sdk" target="_blank"><img src="https://eslint.interlace.tools/logos/vercel.svg" alt="Vercel AI SDK" height="90" /></a>    <a href="https://oxc.rs" target="_blank"><picture><source media="(prefers-color-scheme: dark)" srcset="https://eslint.interlace.tools/logos/oxlint-dark.svg"><img src="https://eslint.interlace.tools/logos/oxlint-light.svg" alt="oxlint" height="90" /></picture></a>    <a href="https://eslint.org" target="_blank"><picture><source media="(prefers-color-scheme: dark)" srcset="https://eslint.interlace.tools/logos/eslint-dark.svg"><img src="https://eslint.interlace.tools/logos/eslint-light.svg" alt="ESLint" height="90" /></picture></a> Security rules for Vercel AI SDK usage (prompt injection, data handling). <a href="https://www.npmjs.com/package/eslint-plugin-vercel-ai-security" target="_blank"><img src="https://img.shields.io/npm/v/eslint-plugin-vercel-ai-security.svg" alt="NPM Version" /></a> <a href="https://www.npmjs.com/package/eslint-plugin-vercel-ai-security" target="_blank"><img src="https://img.shields.io/npm/dm/eslint-plugin-vercel-ai-security.svg" alt="NPM Downloads" /></a> <a href="https://packagephobia.com/result?p=eslint-plugin-vercel-ai-security" target="_blank"><img src="https://badgen.net/packagephobia/install/eslint-plugin-vercel-ai-security" alt="Install Size" /></a> <a href="https://opensource.org/licenses/MIT" target="_blank"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="Package License" /></a> <a href="https://app.codecov.io/gh/ofri-peretz/eslint/components?components%5B0%5D=eslint-plugin-vercel-ai-security" target="_blank"><img src="https://codecov.io/gh/ofri-peretz/eslint/graph/badge.svg?component=eslint-plugin-vercel-ai-security" alt="Codecov" /></a> <a href="https://github.com/ofri-peretz/eslint" target="_blank"><img src="https://img.shields.io/badge/Since-Dec_2025-blue?logo=rocket&logoColor=white" alt="Since Dec 2025" /></a> <a href="https://scorecard.dev/viewer/?uri=github.com/ofri-peretz/eslint" target="_blank"><img src="https://api.securityscorecards.dev/projects/github.com/ofri-peretz/eslint/badge" alt="OpenSSF Scorecard" /></a>

⭐ If this plugin caught a real bug for you, star the repo — it's the signal that keeps these rules maintained.

Description

This plugin provides Security rules for Vercel AI SDK usage (prompt injection, data handling).

Why — a linter nobody reads protects nothing. We would rather miss a finding than spend your attention on one that was never real.
How — evidence, not names. A rule fires on what the code does, resolved through the AST and ESLint's own scope analysis.
What — every finding carries its fix, in prose for a human and as structured JSON for an agent. Security rules add a CWE mapping and, where assigned, a CVSS score.

That trade costs recall, and we measure it: methodology · results · a false positive is a bug.

Getting Started

To check out the guide, visit eslint.interlace.tools. 📚

npm install eslint-plugin-vercel-ai-security --save-dev

⚙️ Configuration Presets

Preset	Description
`recommended`	Balanced security (8 errors, 2 warnings)
`strict`	Maximum security (18 errors, 1 warning)
`minimal`	Minimal config

📚 Supported Libraries

Library	npm	Downloads	Detection
`ai` (Vercel AI SDK)			Prompt Injection, Data Leakage

🤖 AI-Agent Optimized Messages

All rule messages follow a structured format optimized for AI coding assistants:

🔒 CWE-74 OWASP:A03-Injection CVSS:9 | Unsafe Prompt | CRITICAL [SOC2,GDPR]
   Fix: Validate input before use | https://owasp.org/...

By providing this structured context (CWE, OWASP, Fix), we enable AI tools to reason about the security flaw rather than hallucinating. This allows Copilot/Cursor to suggest the exact correct fix immediately.…

Description from the npm listing.

eslint
eslintplugin
eslint-plugin
static-analysis
linting
code-quality
security
sast
appsec
vulnerability
owasp
cwe
interlace-security
vercel
vercel-ai
vercel-ai-sdk
ai-sdk
ai-security
llm
llm-security

README badge

Show your rank in a README or on your website. The badge updates automatically.

[![#1377 of 2322 npm packages by weekly downloads — PluginStats](https://pluginstats.com/badges/npm/eslint-plugin-vercel-ai-security/rank.svg)](https://pluginstats.com/plugins/npm/eslint-plugin-vercel-ai-security)

Charts

Images: 30d · 1y · all time · 1600×900 dark

Adoption over time

eslint-plugin-vercel-ai-security weekly downloads on npm, last 90 days: 1,501 weekly downloads as of Oct 18, 2026, +21.1% over 90 days.

7/30/90-day growth

eslint-plugin-vercel-ai-security weekly downloads growth on npm: -54.1% over 7 days, +162% over 30 days, +21.1% over 90 days.

Ranking history

eslint-plugin-vercel-ai-security npm ranking history: currently #1377 (by weekly downloads).

Listing placement

All npm2,320 listings · 116 pages · 1,162 shown · page 69, #20 (overall #1,380)

All npm: every listing in weekly downloads order

Listing placement

AI SDKs259 listings · 13 pages · page 6, #15 (overall #115)

AI SDKs: every listing in weekly downloads order

Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.

Each band is one page of 20. Weekly downloads on a linear scale. Placement is projected from weekly downloads, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.

Recent observations

Full history (544)

Recent weekly downloads observations for eslint-plugin-vercel-ai-security
Date (UTC)	Weekly downloads	Change vs. previous	Source	Precision
Oct 18, 2026	1,501	-698	Official API	Exact
Oct 17, 2026	2,199	-489	Official API	Exact
Oct 16, 2026	2,688	-498	Official API	Exact
Oct 15, 2026	3,186	-472	Official API	Exact
Oct 14, 2026	3,658	-218	Official API	Exact
Oct 13, 2026	3,876	0	Official API	Exact
Oct 12, 2026	3,876	+604	Official API	Exact
Oct 11, 2026	3,272	+874	Official API	Exact
Oct 10, 2026	2,398	+417	Official API	Exact
Oct 9, 2026	1,981	+462	Official API	Exact
Oct 8, 2026	1,519	+231	Official API	Exact
Oct 7, 2026	1,288	-519	Official API	Exact
Oct 6, 2026	1,807	-668	Official API	Exact
Oct 5, 2026	2,475	—	Official API	Exact

Similar npm AI SDKs plugins

All 20 eslint-plugin-vercel-ai-security alternatives

@tanstack/ai-elevenlabs
1.5K weekly downloads-13.1%
Compare with eslint-plugin-vercel-ai-security →
@cascade-flow/ai-sdk
1.5K weekly downloads-15.3%
Compare with eslint-plugin-vercel-ai-security →
@aui-x/prism
1.5K weekly downloads-42.3%
Compare with eslint-plugin-vercel-ai-security →
content-agent
1.4K weekly downloads-40.8%
Compare with eslint-plugin-vercel-ai-security →
@lleverage-ai/agent-sdk
1.4K weekly downloads-1.5%
Compare with eslint-plugin-vercel-ai-security →
ai-cli
1.4K weekly downloads-31.0%
Compare with eslint-plugin-vercel-ai-security →
qwen-ai-provider
1.7K weekly downloads+38.0%
Compare with eslint-plugin-vercel-ai-security →
zhipu-ai-sdk-provider
1.7K weekly downloads+515%
Compare with eslint-plugin-vercel-ai-security →

Data source

Weekly downloads (trailing 7 complete days) come from the official npm downloads API. Downloads include CI and mirrors and are not equivalent to installs or users. npm publishes no ratings.

Listing: https://www.npmjs.com/package/eslint-plugin-vercel-ai-security. First seen Oct 16, 2026; last successful collection Oct 20, 2026. See the methodology.